Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8e41fae-2e65-319d-bc5e-9ff296e3b713.roa
File:                     e8e41fae-2e65-319d-bc5e-9ff296e3b713.roa (raw, json)
Hash identifier:          q6ERfrLLg2qJBwy3VniIrU1FG3fnON1jCYKQMnkHr1k=
Subject key identifier:   D2:3B:54:DF:CB:AF:00:78:A1:74:12:A6:18:0E:83:1E:27:AC:07:DE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2827A16C710EADEC390D5900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8e41fae-2e65-319d-bc5e-9ff296e3b713.roa
Signing time:             Mon 06 Jun 2022 12:00:00 +0000
ROA not before:           Mon 06 Jun 2022 12:00:00 +0000
ROA not after:            Tue 12 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:28:27:a1:6c:71:0e:ad:ec:39:0d:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  6 12:00:00 2022 GMT
            Not After : Jul 12 04:00:00 2022 GMT
        Subject: CN=1ef77f80-44b1-42bb-948e-59d47f1a6d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:a0:14:87:8b:0c:df:a2:bb:db:af:50:b9:
                    42:a3:4a:21:71:84:43:26:49:3e:b8:1a:f4:c8:b3:
                    cd:33:ab:f4:da:c2:b3:f6:de:22:c5:5a:06:98:32:
                    b6:52:51:b7:39:a0:c8:8b:85:e9:a3:52:7f:58:a3:
                    33:7a:d4:ab:86:a1:d4:6e:ff:e4:25:9e:5a:05:04:
                    7c:67:32:e8:41:cb:c5:1c:32:01:20:b7:fe:df:84:
                    78:71:1d:d0:62:24:25:68:56:f4:c1:57:f5:b5:e3:
                    b6:64:c7:4f:0b:ff:a3:7f:e1:30:15:09:bc:0a:77:
                    d5:75:47:1e:8e:f8:e4:49:37:f5:c5:e9:3d:57:73:
                    6f:e9:22:c3:75:4d:ca:54:0f:05:f3:cd:42:c0:0a:
                    69:43:ac:76:97:ad:d9:b1:42:a5:be:0e:9f:9d:35:
                    04:fa:ae:85:68:83:72:4b:69:94:c5:f8:26:34:fb:
                    f0:6e:27:2d:dd:59:18:f5:48:a7:5e:f3:4c:48:0d:
                    22:a5:48:6d:4b:a3:67:73:22:b4:00:5f:af:83:28:
                    19:cc:3c:da:e3:67:d1:2c:d4:5c:cd:9a:00:b7:81:
                    c2:42:82:48:1b:3d:e2:55:86:41:97:4a:19:51:30:
                    2d:a0:77:98:e4:fc:98:06:47:9b:ca:b2:2d:0b:48:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3B:54:DF:CB:AF:00:78:A1:74:12:A6:18:0E:83:1E:27:AC:07:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8e41fae-2e65-319d-bc5e-9ff296e3b713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:e0:44:25:49:6f:83:e5:fc:32:b3:55:ba:c7:17:83:1f:
         10:ca:d5:d8:d6:59:f6:90:21:07:18:a6:b4:0c:a1:c6:84:75:
         5b:51:5f:3e:fb:49:6f:f7:51:73:b7:ff:e3:7d:1f:76:fe:ca:
         85:39:6a:08:06:45:3b:ff:6f:01:ec:60:31:61:ac:4c:08:20:
         e9:92:0d:d9:76:6a:d5:2b:69:23:da:60:50:f6:89:28:dc:bc:
         fe:ef:7e:6d:e4:e4:04:74:33:01:58:3c:3c:61:ce:51:4b:5e:
         fa:ce:33:13:51:2d:d0:61:34:1b:a7:e9:f6:ef:e7:84:47:7b:
         81:ac:27:1a:77:7e:a7:46:21:2c:2b:f9:bf:eb:dd:60:f6:bf:
         b2:2e:4b:35:68:93:29:a6:18:ef:2d:05:9f:0f:4b:17:bf:4a:
         03:53:e8:68:f5:70:76:02:7b:04:c3:ec:21:6e:52:b9:05:f8:
         dc:85:95:bf:3c:a8:b8:4d:4c:3b:cf:4d:8a:10:21:45:1e:c4:
         5b:d9:45:ef:cf:07:18:96:db:80:af:82:fd:41:5c:45:18:cb:
         9a:92:28:22:35:a2:1b:5c:95:b6:25:fa:32:8c:1e:bd:0e:b2:
         0a:63:18:6a:ce:60:45:d3:e7:bc:23:30:91:53:3e:df:01:b9:
         56:79:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:45 2025 by rpki-client